This server is running a web crawler that periodically scans entire zone files (such as .nl) and measures how many domain names use post-quantum cryptography (PQC) on their websites.
Why?
We are interested in measuring the uptake of PQC-enabled websites.
We plan to publish a graph on stats.sidnlabs.nl, but that requires a bit of love on making everything automated. Currently, these crawls are started manually. We store aggragated results (number of domains with and without PQC support, number of domains per ASN) for later analysis.
What?
This crawler performs two functions: (1) resolve all domain names within a zone file, and (2) crawl the website for each domain and determine whether it supports PQC.
We currently support both X25519MLKEM768 and X25519Kyber768Draft00.
We connect to webservers and only offer these two algorithms in OpenSSL, without fallback to other algorithms. When we can succesfully connect and setup a secure connection, we know PQC is supported, otherwise not. We only collect the (binary) success/failure status for each queried domain name. At the end of the crawl, we store aggregated data for later analysis and plotting as graphs.
We currently run our crawls using the IP addresses 2001:67c:e6c:712:be24:11ff:feda:f8d4 and 145.102.1.12.
Contact
If you have any questions, please contact us.